Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft
File:                     A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft (raw, json)
Hash identifier:          9iGr5gs9AxlHfITjo0WJWPfwTyRLlIJr0ShXop53KVk=
Subject key identifier:   FF:8F:C5:68:A2:DF:1D:03:25:1F:A3:01:26:86:DA:13:9D:AA:76:32
Authority key identifier: A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3
Certificate issuer:       /CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3
Certificate serial:       239F80D52873F9AFCED5F70EA33C1586230F31C1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft
Manifest number:          0281
Signing time:             Wed 29 Jan 2025 23:00:49 +0000
Manifest this update:     Wed 29 Jan 2025 22:55:49 +0000
Manifest next update:     Sun 02 Feb 2025 08:44:49 +0000
Files and hashes:         1: A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl (hash: 4CrG7FJqCcZGTIQ2H+BdxsWzbtl1nAeAJce0Y5ScfW4=)
                          2: 323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa (hash: +t40M702VFWJpOgJRkFuplSndiJmUCoSc6okBYwiNSY=)
                          3: 3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa (hash: YAl9IH945cB6nzFZ+Qtu95xtcvqOant2/UNUilOSLzk=)
                          4: 3130332e3135372e35352e302f32342d3234203d3e20313336303730.roa (hash: Sr5rxwxyX//B5EAQxEl5R5AYvEEW7vDFWvwM/NlIUq4=)
                          5: 3130332e38342e3131362e302f32342d3234203d3e20313336303730.roa (hash: ejo3/L+3kmLyjnvdSLMOsbUtjtQhrjGsr2lCCkclPu4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9f:80:d5:28:73:f9:af:ce:d5:f7:0e:a3:3c:15:86:23:0f:31:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3
        Validity
            Not Before: Jan 29 22:55:49 2025 GMT
            Not After : Feb  2 08:44:49 2025 GMT
        Subject: CN=FF8FC568A2DF1D03251FA3012686DA139DAA7632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6f:fa:c4:a0:2a:48:ac:c1:4e:3e:bc:59:ee:
                    40:1f:ee:f2:4e:05:07:93:18:b2:1d:59:11:43:30:
                    42:37:28:66:97:6d:43:f2:5b:5a:5d:44:48:ed:47:
                    7a:b4:15:0c:c3:2d:6f:c2:d6:91:58:3b:75:c7:d4:
                    a5:a4:bd:c8:dc:85:16:51:b8:22:64:55:bf:9c:50:
                    6b:88:26:c3:55:11:a5:49:17:85:47:5b:68:63:8b:
                    f4:60:d4:47:78:fa:3f:36:81:69:f0:4c:33:55:6e:
                    47:72:34:ff:53:44:23:bc:af:1b:83:1c:52:64:c6:
                    7a:fa:85:e7:70:24:a8:9a:7a:f1:98:b5:7f:42:00:
                    07:d4:9e:0d:13:10:92:09:e6:ba:e4:e5:50:1c:11:
                    f9:87:cd:ae:c9:04:c4:ba:6d:d8:45:84:4e:80:9e:
                    2c:6b:87:8c:c5:d5:4d:4d:55:4b:b3:af:dd:19:fe:
                    c2:b1:a8:bf:28:eb:84:70:00:53:a9:32:26:e2:b0:
                    aa:b8:ef:1e:9d:c5:67:99:10:ce:8a:45:52:8e:e7:
                    7f:81:86:88:59:68:77:4d:b7:88:10:da:ee:11:44:
                    34:e5:a2:47:6a:78:4b:a3:45:8a:66:a1:16:83:2e:
                    ff:b6:d8:90:4b:13:44:a6:44:a0:26:05:77:b4:50:
                    f5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8F:C5:68:A2:DF:1D:03:25:1F:A3:01:26:86:DA:13:9D:AA:76:32
            X509v3 Authority Key Identifier:
                keyid:A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:00:69:0f:ce:75:79:28:99:4a:5b:cb:28:af:ca:88:78:e8:
         b2:35:26:56:46:0a:39:d9:43:cb:04:d3:1a:85:80:00:aa:6c:
         9f:c9:7e:2d:c0:b2:56:04:e9:e0:14:ba:89:34:6c:24:5a:3e:
         d1:97:a3:fe:f8:d5:ed:a1:ce:46:5a:cc:cb:55:8a:21:2c:ad:
         ea:fe:39:6d:15:da:4a:f3:2e:ab:b2:42:4e:e6:5d:25:c8:ca:
         b8:45:43:53:d7:73:ba:4b:37:17:91:64:23:e4:79:e9:8d:d4:
         4e:8f:ad:46:3d:a7:fa:40:2e:f3:6e:5a:e5:56:5c:84:1a:b1:
         c7:58:44:6e:02:d4:52:00:c7:38:72:00:79:4c:f9:b6:ac:29:
         bf:7a:22:43:7e:3c:ce:6f:44:89:4b:23:75:58:f0:c6:a5:e3:
         78:b4:95:c6:63:b5:6b:c6:1a:e8:1d:b4:3b:05:cf:bd:c7:bb:
         6b:fe:9f:59:45:bb:7e:dd:2a:8c:ef:97:86:ca:43:fb:01:5b:
         47:64:36:d8:df:2c:a7:ba:dc:8a:3a:2a:e0:71:9c:1f:f2:01:
         d5:6c:df:ce:0b:26:1d:5d:4f:c6:49:d8:a2:98:7b:7a:b5:8f:
         0f:c0:73:f2:df:72:cc:0a:6f:fa:ac:9a:67:61:01:f2:0e:5c:
         bf:95:b4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----